Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/GU2QnDJzdRpo0ahxBBHQYmQrsHA.roa
File: GU2QnDJzdRpo0ahxBBHQYmQrsHA.roa (raw, json)
Hash identifier: +7YaOKxDwAygVtkGvF9K1mfru2wSlvPtHh7T6l994DY=
Subject key identifier: 19:4D:90:9C:32:73:75:1A:68:D1:A8:71:04:11:D0:62:64:2B:B0:70
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018D108E5029CD20264E329637DBBD4FF884
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/GU2QnDJzdRpo0ahxBBHQYmQrsHA.roa
Signing time: Tue 16 Jan 2024 04:36:18 +0000
ROA not before: Tue 16 Jan 2024 04:36:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.70.0/24 maxlen: 24
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Jan 2024 03:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:10:8e:50:29:cd:20:26:4e:32:96:37:db:bd:4f:f8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 16 04:36:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=194d909c3273751a68d1a8710411d062642bb070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:95:50:61:6c:48:53:fc:5e:7e:8e:93:a7:
ae:31:66:06:bf:67:0c:ae:2f:08:ed:f5:9c:f5:3a:
ca:a1:3d:db:50:d2:60:4b:a3:4a:d6:a5:ac:f7:ff:
f8:d8:d3:06:77:cc:96:fa:6a:db:84:37:c3:80:3a:
94:da:c1:da:90:fd:a2:a7:ce:99:69:44:1d:3c:67:
6e:ac:ee:f9:a1:9a:16:80:61:da:07:21:bd:6f:cc:
31:99:e0:26:d1:3a:a6:aa:28:f7:9f:9b:d6:65:34:
4d:d1:59:b6:49:24:d0:c3:5b:0c:59:7c:bb:0d:c8:
91:f3:04:22:42:0a:fa:36:6c:fa:6b:88:dc:21:81:
9a:0a:aa:70:ee:38:3d:85:9f:6d:f1:9a:b3:bb:6c:
28:d1:6a:dd:ce:23:91:fd:04:89:be:46:bd:72:47:
46:3e:ac:78:c6:db:d6:d2:8b:a7:cb:3e:67:39:b0:
ca:2c:83:93:65:fe:9e:d4:a8:e5:16:a5:20:6a:00:
65:d7:77:26:4d:0a:6c:84:f4:70:c7:ba:ed:62:3a:
9f:d6:48:0a:74:00:b7:7d:dc:3a:0a:e5:ce:b2:9f:
64:0d:c8:5d:ec:b4:3f:b1:e0:26:77:25:9d:64:34:
51:5b:de:35:1e:16:49:fe:f2:c9:2b:37:c1:9e:a7:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4D:90:9C:32:73:75:1A:68:D1:A8:71:04:11:D0:62:64:2B:B0:70
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/GU2QnDJzdRpo0ahxBBHQYmQrsHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.70.0/24
IPv6:
2a03:32c0::/45
2a03:32c0:3004::/47
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::/47
2a03:32c0:7001::/48
Signature Algorithm: sha256WithRSAEncryption
e4:a4:71:cd:35:ee:c0:32:a5:7e:2e:ed:57:be:03:44:fa:56:
57:e7:bd:0c:40:66:b0:37:ad:bf:1f:9f:1f:dc:9c:50:0f:a3:
42:d7:e3:f6:8e:e4:40:53:e1:20:41:6e:30:8b:fa:d5:b3:ec:
5e:06:53:03:1a:61:0a:0d:d3:0c:fe:95:e0:43:86:ec:7a:34:
3c:4c:c4:0f:25:cd:8e:6b:04:19:cc:bf:bc:61:f4:92:b9:50:
16:61:5b:9b:d7:5d:d8:3c:29:61:bf:88:7f:71:d7:ec:39:d2:
aa:39:24:72:83:71:2c:01:ec:1b:9a:33:11:f3:54:f3:3e:04:
88:38:55:ac:44:6d:1b:f6:11:c9:82:24:c2:2e:50:2d:63:68:
68:fe:48:af:0d:15:0c:21:06:62:4b:29:62:bb:b5:c4:ce:80:
73:0e:52:61:0d:37:e8:f0:32:e8:9b:88:6e:21:a7:73:42:14:
d1:48:df:18:ff:8e:13:1b:bf:ee:46:f1:b4:ef:21:a6:ce:43:
3f:c7:bc:bb:11:80:b5:40:5b:62:17:b9:0a:10:22:29:b4:bc:
65:82:dc:a2:1f:b4:2f:13:54:98:c2:ff:d5:2b:0f:dd:6f:90:
0f:dc:e7:52:64:06:3d:de:98:f9:5e:4d:d7:d7:f5:0e:7f:cc:
69:19:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:54 2024 by rpki-client on console-ams.rpki-client.org